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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings^ of claims in the application: 
T.isting of naims! 

1 Claims 1.-9. (canceled). 

1 Claim 10. (currently amended) A method performed by a custodian computing 

2 system, having memory, to share a secr^ S among n secret owners such ttiat any k of the n secre . 

3 owners may reconstruct the secret 5, the method comprising the steps of: 

4 choosing two large primes P and such that PQ is greater than S when 5 is a 

5 number; 

6 storing in the custodian compute system memory a product N = PQ; 

7 storing a product M=(P-l)(g-l); 

S choosing n random numbers through e„ that are relatively prime to N; 

9 choosing another random number e that is relatively prime to N; 

1 0 choosing n numbers dj through dn such that e^, mod M equals one for 1 ^ i ^ n ; 

1 1 choosing another number d such diat ed mod M is equal to one; 



12 storing a database of 



^ j entries, wherein each entry is associated with a unique 



1 3 combination of the 



possible combinations of the k secret owners, and wherein a particular 



14 entry includes a value, c, that is the product of modulus M of d and the di valu^ for i indices tha 

1 5 correspond to the particular secret owners present in the unique combination for that particular 

1 6 entry, wherein c corresponds to modulus M of the product kdi ^; 

17 compirting5^; 

1 8 deleting from the custodian computer memory P, g, and A/; 

19 distributing n secret owner pieces to each of the n secret owners, wherein each of 

20 the secret owner pieces includes 5* and one of the numbers e, through e„; 
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21 deleting the secret S and e^ through e„, through and d; 

22 receiving k secret owner values from a unique combination of k secret owners; 

23 determining a the value c that is associated with the unique combination; and 

24 determining the secret S using the value c retrieved from the database entry 

25 corresponding to the k secret owners whose secret owner pieces have been received and S*mod 

26 N. 

1 Claim 11. (previously presented) A method as in claim 10, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a first of the n secret owner pieces from one of the n secret owners; anc 

4 computing and storing S' = 5^^ mod where / represents the one of the numbers 

5 through contained in the first of the n secret owner pieces. 

1 Claim 12. (previously presented) A method as in claim 11, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a second of the n secret owner pieces from another one of the n secret 

4 owners; 

5 computing mod where g represents the one of the numbers through €„ 

6 contained in the second of the n secret owner pieces; and replacing S' with S'^ mod N. 

1 Claim 13. (previously presented) A method as in claim 12, wherein receiving k 

2 secret owner values fix)m the unique combination of k secret owners comprises: 

3 each time another of the secret owner pieces is received from another one of tiie ; i 

4 secret owners; 

5 computing S"^ mod where q represents the one of the numbers through e„ 

6 contained in the another of the n secret owner pieces; and replacing S' with iS* mod N, 
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1 Claim 14. (previously presented) A method as in claim 13» further comprising 

2 the stq)s of: 

3 after k secret owner pieces have been received, 

4 retrieving fiom the database the value c from among the j values, wherein the 

5 vahie c corresponds to the k secret owner pieces of the unique combination of k secr^ owners 

6 that were received by the custodian; 

7 computing S*^ mod N\ and 

8 replacing S' with mod 

1 Claim 1 5. (currently amended) A method performed by a custodian computing 

2 system, having memory, to share a secret S among n secret owners such that any k of the n secre 

3 owners may reconstruct the secret, the method comprising the steps of: 

4 choosing two large primes P and such that PQ is greater than S where is a 

5 number; 

6 storing in the custodian computer memoiy a product N = PQ; 

7 storing a product M = (P-l)(g-l); 

8 choosing n random nujinbers through e„ that are relatively prime to N; 

9 choosing random numbers e and that are relatively prime to N; 

10 choosing n numbers through dn such that Cfdi mod M equals one for 1 < i < n ; 

1 1 choosing numbers d and d' such that ed mod M is equal to one and such that e'd' 

12 mod Mis equal to one; 

fn\ 

13 storing a database of entries, wherein each entry is associated with a imique 

14 combination of the j ^ | possible combinations of the k secret owners, and wherein a particular 



1 5 entry includes a value, c, that is the product of modulus M of d and the di values for i indices tha 
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16 correspond to the particular secret owners present in the unique combination for that particular 

17 entry, wherein c corresponds to modulus M of the product Afifc Mfy 

1 8 computing S^'; 

19 deleting from the custodian computer memory P, Q, and Af; 

20 distributing n secret owner pieces to each of the n secret owners, wherein each oi 

21 the secret owner pieces includes iS^' and one of the numbers 6^ through €„ ; 

22 deleting the secret S and through through and d 

23 receiving k secret ownCT values from a unique combination of k secret owners; 

24 retrieving from the database the value c that is associated with the unique 

25 combination; and 

26 determining the secret S using the value c and the k secret owner value. 

1 Claim 16. (previously presented) A method as in claim I wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a first of the n secret owner pieces from one of the n secret owners; and . 

4 computing and storing S' = 5*^^ mod M where / represents the one of the numben 

5 By through contained in the first of the n secret owner pieces. 

1 Claim 1 7. (previoxisly presented) A method as in claim 16, wherein receiving k 

2 secret owner values from the unique combination of k secret owners comprises: 

3 receiving a second of the n secret owner pieces from another one of the n secr^ 

4 owners; 

5 computing S'^ mod whwe g represents the one of the numbers through e„ 

6 contained in the second of the n secret owner pieces; and replacing S' with mod N. 

1 Claim 18. (previously presented) A method as in claim 17, wherein receiving k 

2 secret owner values from the unique combination of k secret OAvners conq)rises: 

3 each time another of the secret owner pieces is received from another one of the ; 

4 secret owners; 
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5 computing S'^ mod iV, where g r^resents the one of the numbers througji e„ 

6 contained in the another of the n secret owner pieces; and replacing S' with mod N. 

1 Claim 19. (previously presented) A method as in claim 18, further comprising 

2 the steps of; 

3 after k secret owner pieces have been received, 

values, wherem the 

5 value c corresponds to the k secret owner pieces from the unique combination of k secret owner ; 

6 that were received by the custodian; 

7 computing S'^ mod N; 

8 replacing jS' with 5*^ mod TV; 

9 computing mod iV; and 

1 0 replacing S' with S'^ mod N, 

1 Claim 20. (currently amended) A method performed by a custodian computing 

2 system, having memory, to share a secret among n secret owners such that any of the n secret 

3 ownCTS may reconstruct the secr^ the m^hod comprising the steps of: 

4 encrypting the secret so as to generate an encrypted secret; 

5 deleting from the custodian computer memory the secret; and 

6 performing a forward k out of n secret sharing algorithm on the encrypted secret 

7 so as to generate n secret owner pieces; 

8 storing in a database a plurality of entries associated with a plurality of unique 

9 combinations of k secret owners of the n secret owners, wherein a particular entry includes a 

1 0 va]ue, c, that is ^ a product of modulus M of d and &e dt values for i indices that correspond t( 

1 1 , the particular secret owners present in the unique combination for that particular entry, \^erein : 

1 2 corresponds to modulus M of the product kdi kdi\ 

1 3 distributing the n secret owner pieces to the n secret owners; 

14 receiving k secret owner values from a unique combination of k secret owners; 
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1 5 retrieving from the database a value c that is associated with the unique 

16 combination; 

17 performing a reverse k out of n secret sharing algorithm on the k secret owner 

1 8 pieces so as to recreate the encrypted secret using the value c; and 

1 9 decrypting the encrypted secret so as to recreate the secret. 

Claims 2 1 . - 24. (canceled). 

1 Claim 2S. (original) A method as in claim 20, wherein the step of performing a 

2 forward k out ofn secret sharing algorithm includes the steps of: 

3 dividing the encrypted secr^ into k pieces; and 

4 performing n polynomial evaluations at n points of a degree*^: polynomial using 

5 the i pieces of the encrypted secret as polynomial coefficients; 

6 wherein each of the k secret owner pieces includes a result of one of the n 

7 polynomial evaluations and a corresponding one of the n points. 

1 Claim 26. (previously presented) A method as in claim 25, wherein the step of 

2 performing a reverse k out ofn secret sharing algorithm includes the steps of generating a systeri 

3 of ^ linear equations and solving the s^em of k linear equations for the k pieces of the encrypted 

4 secret. 

1 Claim 27. (previously presented) A method as in claim 26» further comprising 

2 the step of: 

3 assembling the k pieces of the encrypted secret so as to recreate the encrypted 

4 secret. 



Claims 28.-29. (canceled). 
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1 Claim 30. (currently amended) A compute readable storage medium having 

2 embodied ttiereon computer readable program code suitable for programming a computer to 

3 perform a method performed by a custodian to share a secret S among n secret owners such that 

4 any k of the n secret owners may reconstruct the secret, the method comprising the steps of: 

5 choosing two large primes P and Q, such that PQ is greater than S where 5 is a 

6 number; 

7 computing and storing a product = PQ; 

8 computing and storing a product M = (P-l)(0-l); 

9 choosing n random numbers e, through e„ that are relatively prime to N; 

10 choosing another random number e that is relatively prime to N; 

1 1 choosing n numbers rf, througih dn such that e^s mod M equals one for l<i <n ; 

1 2 choosing another number d such that ed mod M is equal to one; 

1 3 storing a database of entries, wherein each entry is associated with a unique 

14 combination of the possible combinations of the k secret owners, and wherein a particular 

15 entry includes a value, c, that is the product of modulus M of d and the di values for i indices that 

16 correspond to the particular secret owners present in the unique combination for that particular 

1 7 entry, whwein c corresponds to modulus M of the product Mi kdii 

18 computings*; 

1 9 deleting P, Q, and M; 

20 distributing n secret owner pieces to each of the n secret owners, wherein each of 

21 the secret owner pieces includes and one of the numbers through 

22 deleting the secret S and through e^, e, d^ through d„, and d; 

23 receiving k secret owner values from a unique combination of k secret owners; 

24 retrieving from the database one of ±e values c that is associated with the unique 

25 combination; and 

26 determining the secret S using the vahie c and the k secret owner values. 
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1 Claim 3 1 . (currently amended) A computer readable storage medium having 

2 embodied thereon cotnputer readable program code suitable for programming a computer to 

3 perform a method performed by a custodian to share a secret S among n secret owners such that 

4 any k of the n secret owners may reconstruct the secret, the metlK>d comprising the steps of: 

5 choosing two large primes P and Qy such that PQ is greater than where is a 

6 number; 

7 storing a product N - PQ; 

8 storing a product Af = {P-l){QA); 

9 choosing n random nimibers through e„ that are relatively prime to N; 

1 0 choosing random numb^ e and e' that are relatively prime to N; 

1 1 choosing n numbers J, through rf„ such that e^/^ mod M equals one for 1 ^ r < n ; 

12 choosing numbers d and d' such that ed mod M is equal to one and such that e'd' 

1 3 mod M is equal to one; 



1 4 generating and storing a database of 



values, where each value is the product 



15 ofd and a unique k of the df numbers for 1 < i < n , wherein each value is associated with a 

16 unique combination of k secret owners of the n secret owners; 



1 7 storing a database of 



(:) 



wtries, wherein each entry is associated with a unique 



18 combination of the . 



possible combinations of the k secret owners, and wherein a particular 



19 entry includes a value, c, that is the product of modulus M ofd and the di values for i indices thac 

20 correspond to the particular secret owners present in the unique combination for that particular 

2 1 entry, wherein c corresponds to modulus M of the product kdi ^; 

22 computing S^'; 

23 deleting P, Q, and Af; 
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24 distributing n secret owner pieces to each of the n secret own^, wherein each of 

25 the secret owner pieces includes ^ and one of the numbers e, through en\ 

26 deleting the secret S and through e^^ c, through and d\ 

27 receiving k secret owner values from a unique combination of k secret owners; 

28 retrieving from the database one of the values c that is associated with the unique 

29 combination; and 

30 determining the secret S using the value c and the k secret owner values. 

1 Claim 32. (previously presented) A conq)uter readable storage mediimi having 

2 embodied thereon computer readable program code suitable for programming a computer to 

3 perfomi a method performed by a custodian to share a secret among n secret owners such that 

4 any k of the n secret owucts may reconstruct ttie secret, the method coinprising the steps of: 

5 encrypting the secret so as to generate an encrypted secret; 

6 deleting the secret; 

7 performing a forward k out of n secret sharing algorithm on the encrypted secret 

8 so as to generate n secret owner pieces; 

9 storing in a database a pliiraUty of entries associated with a plurality of unique 

1 0 combinations of k secret owners of the n secret owners, wherein a particular entry includes a 

1 1 value, c, that is a product of modulus M of d and ^ di values for i indices that correspond t( 

12 the particular secret owners present in the unique combination for that particular entry, wherein ^ 

1 3 corresponds to modulus M of the product kdi ^; 

1 4 distributing the n secret owner pieces to the n secret own^s; 

1 5 receiving k secret owner values from a unique combination of k secret owners; 

16 retrieving from the database one of the values c that is associated with the unique 

17 combination; 

1 8 performing a reverse k out of n secret sharing algorithm on the k secret owner 

19 pieces so as to recreate the encrypted secret using the value c; and 

20 decrypting the encrypted secret so as to recreate the secret. 
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Claims 33.-34. (canceled). 

1 Claim 35. (currently amended) A computer comprising a processor and a 

2 computer readable storage medium coupled to the processor having embodied thereon process© ' 

3 readable program code suitable for programming a computer to perform a method performed bj 

4 a custodian to share a secret S among n secret owners such that any ^ of the n secret owners ma: 

5 reconstruct the secret, the method comprising the steps of: 



6 choosing two large primes P and Q, such that PQ is greater than S where S is a 

7 number; 

8 storing a product A^ = P^, 

9 storingaproductAf = (P-1)(^1); 

10 choosing n random numbers e, through e„ that are relatively prime to N; 

1 1 choosing anoth^ random nimiber e that is relatively prime to N; 

12 choosing n numbers rfjthrougji d„ such that ^li// modMequals one for 1 < x < « ; 

1 3 choosing another number d such that ed mod M is equal to one; 

(n\ 
entries, wha^ein each entry is associated with a unique 



15 combination of the |^^J possible combinations of the k secret owners, and wherein a particular 

16 entry includes a value, c, that is the product of modulus M of d and the dj values for i indices tha* 

17 correspond to the particular secret owners present in the unique combination for that particular 

1 8 entry, wherein c corresponds to modulus M of the product JW* ^; 

19 computings^; 

20 deleting 2, and Af; 

2 1 distributing n secret owner pieces to each of the n secret owners, wherein each of 

22 the secret owner pieces includes 5* and one of the numbers through e^; 

23 delving the secret S and through e„, e, rf, through and d; 

24 receiving k secret owner values from a unique combination of k secret owners; 
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25 retrieving fixnn the database one of the a values c that is associated with the 

26 rniique combination; and 

27 determining the secret S using the value c and the k secret owner values. 

1 Claim 36. (currently amended) A computer comprising a processor and a 

2 computer readable storage medium coupled to the processor having embodied thereon processoi 

3 readable program code suitable for programming the computer to perform a method performed 

4 by a custodian to share a secret S among n secret owners such that any ^ of the n secret owners 

5 may reconstruct the secret, the method comprising the steps of: 

6 choosing two large primes P and Q, such that PQ is greats than S where S is a 

7 number; 

8 storing a product N = PQ; 

9 storing a product M= (P-l)(g-l); 

1 0 choosing n random numbers e, through e„ that are relatively prime to N\ 

1 1 choosing random numbers e and e' that are relatively prime to N; 

12 choosing n numbers rf, through dn such that etdi mod M equals one for 1 ^ i < n ; 

13 choosing numbers d and d' such that ed mod M is equal to one and such that e'd' 

14 mod M is equal to one; 

{n\ 

15 generating and storing a database of values, where each value is the product 

I*; 

16 of rf and a unique k of the rf, numbers for 1 < i < /i , wherein each value is associated with a 

17 unique combination of k secret owners of the n secret owners; 

1 8 storing a database of j entries, wherein each entry is associated with a unique 

19 combination of the j possible combinations of the k secret owners, and wherein a particular 

20 entry includes a value, c, that is the product of modulus M of d and the d( values for i indices thit 

21 correspond to the particular secret owners present in the unique combination for that particular 

22 entry, wherein c corresponds to modulus M of the product kdi kdi. 
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23 computing S^'; 

24 deleting P, Q, and M; 

25 distributing n secret owner pieces to each of the n secret owners, wherein each o: 

26 the secret owner pieces includes and one of the numbers through e„; 

27 deleting the secret S and through e„, e, rf, through rf^, and d; 

28 receiving k secret owner values from a unique combination of k secret owners; 

29 retrie\ing fiom the database one of the values c that is associated with the unique 

30 combination; and 

3 1 determining the secret S using the value c and the k secret owner values. 



1 Claim 37. (currently amended) A computer comprising a processor and a 

2 computer readable storage mediiun coupled to the processor having embodied thereon processoi 

3 readable program code suitable for programming the con^uter to perform a method performed 

4 by a custodian to share a secret among n secret owner such that any k of the n secret owners ma; ' 

5 reconstruct the secret, the method comprising the steps of: 



6 encrypting the secret so as to generate an encrypted secret; 

7 delving the secret; 

8 performing a forward k out of n secret sharing algorithm on the encrypted secret 

9 so as to generate n secret owner pieces; 

10 storing in a database a plurality of entries associated with a plurality of unique 

1 1 combinations of k secret owners of the n secret owners, wherein a particular entry includes a 

12 vahie, c, that is ^ a product of modulus M of d and fee di values for i indices that correspond tc 

13 the particidar secret owners present in the unique combination for that particular entry, wherein • . 

14 corresponds to modulus M of the product kdi Mi> 

1 5 distributing the n secret owner pieces to the n secret ownCTs; 

1 6 receiving k secret owner values fiom a unique combination of k secret owners; 

1 7 retrieving from the database one of the values c that is associated with the unique 

18 combination; 
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1 9 perfonning a reverse k out of n secret sharing algorithm on the k secret owner 

20 pieces so as to recreate the encrypted secret using the value c; and 

21 decrypting the encrypted secret so as to recreate the secret. 
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